$ rpki-client -vvf rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft File: tNQViTJWcWZLLGBPEt4EdX4uzNs.mft (raw, json) Hash identifier: hZ3WFe4VRQ3fmh74AF4phklSa7dV7KCUqmlZegenFpg= Subject key identifier: 9B:79:89:72:2B:A6:03:41:4A:D9:C7:BC:87:85:CF:BB:C1:67:23:F7 Authority key identifier: B4:D4:15:89:32:56:71:66:4B:2C:60:4F:12:DE:04:75:7E:2E:CC:DB Certificate issuer: /CN=A916432A/serialNumber=B4D41589325671664B2C604F12DE04757E2ECCDB Certificate serial: 06A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNQViTJWcWZLLGBPEt4EdX4uzNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft Manifest number: 069E Signing time: Thu 02 May 2024 23:24:07 +0000 Manifest this update: Thu 02 May 2024 23:24:06 +0000 Manifest next update: Thu 09 May 2024 23:24:06 +0000 Files and hashes: 1: tNQViTJWcWZLLGBPEt4EdX4uzNs.crl (hash: QgsrGsY6LJiOxfpGibE+mPdhKNERj5dqchTUQaGpD14=) 2: 67CD2004292211EB8A9B3D73C4F9AE02.roa (hash: udcD1sUGiA9k+25JZ+c/uFAobFLj5N2yKIDBnK+rCHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.crl rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNQViTJWcWZLLGBPEt4EdX4uzNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1700 (0x6a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916432A/serialNumber=B4D41589325671664B2C604F12DE04757E2ECCDB Validity Not Before: May 2 23:24:06 2024 GMT Not After : May 9 23:24:06 2024 GMT Subject: CN=66342097-8d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:59:27:a0:9f:e4:26:07:5c:35:9e:e5:03:20: ba:4b:ec:5a:8a:7b:ff:35:5b:67:41:e3:10:85:ca: a3:17:4d:78:02:7d:69:40:ea:2e:5a:e4:36:6f:a5: 6c:25:43:0f:3c:f8:10:cb:9e:9a:09:86:fc:0d:cb: f1:0f:dc:95:17:16:24:d2:25:0f:60:1e:23:cd:56: fb:00:48:32:9b:fc:1b:1e:c8:71:dd:e8:ee:2a:cb: 42:36:33:0a:82:92:68:6d:85:d3:8d:cd:74:13:93: 90:2d:4b:38:57:d0:52:aa:24:31:d3:b4:8a:41:52: e0:f4:06:c0:9a:82:d8:fb:3a:c3:28:a8:fe:58:82: 87:3a:6a:c6:5e:cd:d8:c9:9f:1e:6f:1f:21:1d:56: 47:bd:8f:4d:70:d3:4f:bd:76:65:f0:18:a2:08:6e: f4:cb:3f:cf:87:f9:67:bc:57:e1:a8:28:ee:72:f7: f9:34:0c:88:5a:77:22:00:9a:9a:01:3e:52:a3:f0: 44:6f:d0:51:f8:ec:24:f1:76:fe:f0:ad:10:17:d3: cc:27:fc:37:f5:65:4e:85:d3:08:70:24:27:35:ba: da:07:f0:7d:f8:97:bd:f6:56:e3:95:d5:7a:55:13: 95:22:0f:f6:c5:8f:3d:5f:c6:b4:97:0f:c8:a8:79: 8f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:79:89:72:2B:A6:03:41:4A:D9:C7:BC:87:85:CF:BB:C1:67:23:F7 X509v3 Authority Key Identifier: keyid:B4:D4:15:89:32:56:71:66:4B:2C:60:4F:12:DE:04:75:7E:2E:CC:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNQViTJWcWZLLGBPEt4EdX4uzNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:ff:65:59:15:f7:53:7b:82:ef:95:fd:ac:a3:0e:5e:46:ec: 22:41:c7:65:41:1e:b6:86:96:19:0b:be:86:a7:ed:44:01:9c: 48:5c:e9:8c:59:ea:55:56:cf:fc:a2:86:14:e4:59:b4:b9:2b: c0:55:b6:ea:31:31:1b:00:d6:17:6c:3e:f7:a2:37:c6:5e:55: c1:37:58:8f:9d:fa:4c:79:e4:e3:fe:3b:33:7a:99:d5:c6:91: 6b:70:43:13:f6:ef:0e:ee:b2:1c:a9:cc:87:51:9c:69:70:85: f6:93:0f:e8:31:a9:67:04:0e:61:3e:64:43:0a:ba:dc:af:b9: ed:ce:2a:06:f7:e4:28:76:0e:b1:eb:a4:c2:9b:91:b7:f9:3b: b6:33:76:97:76:a1:db:72:5a:55:5e:bc:bb:57:64:ca:3a:cb: f5:41:d2:c9:d4:bd:b2:41:1d:a4:aa:24:85:2e:a5:76:35:e8: 56:57:38:af:26:19:14:a6:bc:47:b5:1b:10:b1:d6:f2:0d:3d: c5:ce:97:f6:56:b1:53:09:c5:bc:e1:2a:eb:1c:68:78:17:fd: 71:12:c7:82:3d:f1:98:e8:bd:bf:45:fe:cd:0c:32:a2:e4:4d: e2:8d:3f:8b:13:d8:b1:97:1c:7c:4e:4e:b2:51:a9:92:eb:4e: 8f:f0:9a:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQzMkExMTAvBgNVBAUTKEI0RDQxNTg5MzI1NjcxNjY0QjJDNjA0RjEyREUwNDc1 N0UyRUNDREIwHhcNMjQwNTAyMjMyNDA2WhcNMjQwNTA5MjMyNDA2WjAYMRYwFAYD VQQDEw02NjM0MjA5Ny04ZDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1knoJ/kJgdcNZ7lAyC6S+xainv/NVtnQeMQhcqjF014An1pQOouWuQ2b6Vs JUMPPPgQy56aCYb8DcvxD9yVFxYk0iUPYB4jzVb7AEgym/wbHshx3ejuKstCNjMK gpJobYXTjc10E5OQLUs4V9BSqiQx07SKQVLg9AbAmoLY+zrDKKj+WIKHOmrGXs3Y yZ8ebx8hHVZHvY9NcNNPvXZl8BiiCG70yz/Ph/lnvFfhqCjucvf5NAyIWnciAJqa AT5So/BEb9BR+Owk8Xb+8K0QF9PMJ/w39WVOhdMIcCQnNbraB/B9+Je99lbjldV6 VROVIg/2xY89X8a0lw/IqHmPXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJt5iXIr pgNBStnHvIeFz7vBZyP3MB8GA1UdIwQYMBaAFLTUFYkyVnFmSyxgTxLeBHV+Lszb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDMyQS9BNjEzRjU1QTFC NzUxMUVCOTgyNTQwMDlDNEY5QUUwMi90TlFWaVRKV2NXWkxMR0JQRXQ0RWRYNHV6 TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROUVZpVEpXY1daTExHQlBFdDRFZFg0dXpOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDMyQS9BNjEzRjU1QTFCNzUxMUVCOTgyNTQwMDlDNEY5QUUwMi90TlFWaVRKV2NX WkxMR0JQRXQ0RWRYNHV6TnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX/2VZFfdTe4Lvlf2sow5eRuwiQcdlQR62hpYZC76Gp+1EAZxIXOmM WepVVs/8ooYU5Fm0uSvAVbbqMTEbANYXbD73ojfGXlXBN1iPnfpMeeTj/jszepnV xpFrcEMT9u8O7rIcqcyHUZxpcIX2kw/oMalnBA5hPmRDCrrcr7ntzioG9+Qodg6x 66TCm5G3+Tu2M3aXdqHbclpVXry7V2TKOsv1QdLJ1L2yQR2kqiSFLqV2NehWVziv JhkUprxHtRsQsdbyDT3Fzpf2VrFTCcW84SrrHGh4F/1xEseCPfGY6L2/Rf7NDDKi 5E3ijT+LE9ixlxx8Tk6yUamS606P8JoV -----END CERTIFICATE-----Generated at Fri May 3 00:07:12 2024 by rpki-client on console-ams.rpki-client.org